This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa
File: 6dJJQaLsf-pJV9GESFzivPI_ry0.roa (raw, json)
Hash identifier: m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=
Subject key identifier: E9:D2:49:41:A2:EC:7F:EA:49:57:D1:84:48:5C:E2:BC:F2:3F:AF:2D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019B7D5D1AD42700548D7265D18BAE936987
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa
Signing time: Fri 02 Jan 2026 06:20:12 +0000
ROA not before: Fri 02 Jan 2026 06:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 94.247.137.0/24 maxlen: 24
193.43.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:1a:d4:27:00:54:8d:72:65:d1:8b:ae:93:69:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 2 06:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9d24941a2ec7fea4957d184485ce2bcf23faf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:d9:78:15:96:12:28:d5:4f:4f:3b:23:25:
65:31:b6:4b:8a:37:44:74:7f:6c:c6:70:0e:2d:ef:
12:41:0d:ad:ea:88:23:76:5b:5a:d6:10:78:f5:54:
ea:74:96:28:e7:55:7d:61:65:93:1b:77:f0:52:fa:
4f:ac:f8:10:57:c0:89:39:ad:12:c3:fc:21:0a:7e:
32:54:3c:ed:32:0c:76:f9:3d:01:d3:ac:b0:a1:d4:
47:a1:8c:f9:1c:49:54:c3:db:d8:00:b5:ad:1b:4a:
d7:30:db:9d:92:63:e3:45:91:3a:1e:a6:54:ac:7f:
8f:7e:7a:b2:4c:1f:31:b7:44:c8:60:ed:db:15:44:
0f:02:3e:8b:99:be:f7:43:e7:73:9b:ba:f8:36:72:
28:de:57:3e:96:33:1a:d6:8f:c5:9c:63:f6:df:3d:
b1:b9:81:50:a8:29:a5:51:44:07:ba:c6:fe:90:51:
a0:5c:2e:85:b8:55:c1:cf:8b:2e:92:6d:7b:0e:1e:
26:b6:3f:7d:28:3d:b3:d2:0c:a3:47:b2:c3:92:c6:
9c:6f:4f:66:46:7a:55:55:1c:8f:57:98:77:e2:aa:
5f:61:cd:36:5b:ca:d8:d3:0a:6d:f0:f9:ef:b2:e4:
5b:ee:f4:40:66:c5:92:80:7d:cd:27:df:ab:be:f8:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D2:49:41:A2:EC:7F:EA:49:57:D1:84:48:5C:E2:BC:F2:3F:AF:2D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
193.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c1:d3:6e:cb:8d:f6:0e:ae:4d:8e:27:6b:aa:99:2e:d6:87:
9f:83:d5:4d:9f:88:8e:e4:b5:4f:c1:96:84:be:4f:7e:ae:92:
65:26:a7:dc:4f:78:dc:4c:22:a9:42:fe:f4:17:2a:80:a4:0f:
6f:63:4e:19:ea:fb:f7:da:23:67:90:01:ed:1b:51:bd:59:82:
26:b6:90:4d:30:c4:f1:9c:bb:0c:14:7c:0c:bd:c4:24:62:3e:
39:26:b2:b0:bc:c4:96:e6:be:e4:e9:4a:e6:a0:56:1a:9c:0c:
a3:bd:ac:c6:09:5c:7e:f9:2d:49:ba:d5:48:89:f0:fe:29:a6:
8a:0c:b8:49:85:80:0b:59:0c:15:ee:86:e6:ff:f9:c0:dc:d0:
49:e4:54:82:57:09:97:16:26:d4:38:ed:fb:46:74:75:d8:e5:
5c:08:6d:03:ad:63:a0:01:64:c3:d6:1c:2f:b5:2b:ea:7c:b9:
5c:1b:4d:61:46:e7:97:86:45:93:a2:43:e0:49:50:df:20:74:
f7:23:9a:e1:0d:89:30:22:d7:e6:66:37:0b:b5:3b:db:a6:f9:
b0:30:e9:06:c3:ed:b1:b5:6f:31:2e:47:91:7f:fa:33:10:68:
b3:11:7b:3a:8e:72:28:1a:f4:56:c9:b3:a2:ff:30:ab:9d:30:
cc:21:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:42:49 2026 by rpki-client